Vulnerabilities > CVE-2023-4883 - Release of Invalid Pointer or Reference vulnerability in Open5Gs

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

open5gs

CWE-763

NVD

Published: 2023-10-03

Updated: 2023-10-05

Summary

Invalid pointer release vulnerability. Exploitation of this vulnerability could allow an attacker to interrupt the correct operation of the service by sending a specially crafted json string to the VNF (Virtual Network Function), and triggering the ogs_sbi_message_free function, which could cause a service outage.

Vulnerable Configurations

Part	Description	Count
Application	Open5Gs Open5Gs Open5Gs - Open5Gs Open5Gs 0.1.0 Open5Gs Open5Gs 0.1.1 Open5Gs Open5Gs 0.2.0 Open5Gs Open5Gs 0.3.0 Open5Gs Open5Gs 0.3.1 Open5Gs Open5Gs 0.3.2 Open5Gs Open5Gs 0.3.3 Open5Gs Open5Gs 0.3.4 Open5Gs Open5Gs 0.3.5 Open5Gs Open5Gs 0.3.6 Open5Gs Open5Gs 0.3.7 Open5Gs Open5Gs 0.3.8 Open5Gs Open5Gs 0.3.9 Open5Gs Open5Gs 0.3.10 Open5Gs Open5Gs 0.3.11 Open5Gs Open5Gs 0.4.0 Open5Gs Open5Gs 0.4.1 Open5Gs Open5Gs 0.4.2 Open5Gs Open5Gs 0.4.3 Open5Gs Open5Gs 0.4.4 Open5Gs Open5Gs 0.5.0 Open5Gs Open5Gs 0.5.1 Open5Gs Open5Gs 0.5.2 Open5Gs Open5Gs 1.0.0 Open5Gs Open5Gs 1.1.0 Open5Gs Open5Gs 1.2.0 Open5Gs Open5Gs 1.2.1 Open5Gs Open5Gs 1.2.2 Open5Gs Open5Gs 1.2.3 Open5Gs Open5Gs 1.2.4 Open5Gs Open5Gs 1.3.0 Open5Gs Open5Gs 2.0.0 Open5Gs Open5Gs 2.0.18 Open5Gs Open5Gs 2.0.20 Open5Gs Open5Gs 2.0.21 Open5Gs Open5Gs 2.0.22 Open5Gs Open5Gs 2.1.0 Open5Gs Open5Gs 2.1.1 Open5Gs Open5Gs 2.1.3 Open5Gs Open5Gs 2.1.4 Open5Gs Open5Gs 2.1.5 Open5Gs Open5Gs 2.1.7 Open5Gs Open5Gs 2.2.0 Open5Gs Open5Gs 2.2.1 Open5Gs Open5Gs 2.2.2 Open5Gs Open5Gs 2.2.3 Open5Gs Open5Gs 2.2.4 Open5Gs Open5Gs 2.2.5 Open5Gs Open5Gs 2.2.6 Open5Gs Open5Gs 2.2.7 Open5Gs Open5Gs 2.2.8 Open5Gs Open5Gs 2.2.9 Open5Gs Open5Gs 2.3.0 Open5Gs Open5Gs 2.3.1 Open5Gs Open5Gs 2.3.2 Open5Gs Open5Gs 2.3.3 Open5Gs Open5Gs 2.3.4 Open5Gs Open5Gs 2.3.6 Open5Gs Open5Gs 2.4.0 Open5Gs Open5Gs 2.4.1 Open5Gs Open5Gs 2.4.2 Open5Gs Open5Gs 2.4.3 Open5Gs Open5Gs 2.4.4 Open5Gs Open5Gs 2.4.5 Open5Gs Open5Gs 2.4.6 Open5Gs Open5Gs 2.4.7 Open5Gs Open5Gs 2.4.8 Open5Gs Open5Gs 2.4.9 Open5Gs Open5Gs 2.4.10	70

Common Weakness Enumeration (CWE)

CWE-763 - Release of Invalid Pointer or Reference

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-open5gs